$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3232342e302f31392d3139203d3e203137393638.roa File: 3132352e35382e3232342e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: ZViRbBWitUW7x4j2EZT+lmPiK4pNDijFsT4gsv8QkQU= Subject key identifier: 14:3F:CB:5C:F1:3F:D8:EE:A0:B5:EB:5F:84:72:2E:C7:F6:06:EC:80 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 77AA5095A0B2A59613362B8A798722080E2C53C6 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3232342e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:53:33 +0000 ROA not before: Mon 29 Jun 2026 02:48:33 +0000 ROA not after: Mon 28 Jun 2027 02:53:33 +0000 asID: 17968 IP address blocks: 125.58.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:aa:50:95:a0:b2:a5:96:13:36:2b:8a:79:87:22:08:0e:2c:53:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:48:33 2026 GMT Not After : Jun 28 02:53:33 2027 GMT Subject: CN=143FCB5CF13FD8EEA0B5EB5F84722EC7F606EC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:65:a1:a9:98:ea:f3:33:38:6e:63:e0:88: 33:d5:86:eb:c7:46:21:07:88:b8:9f:17:8f:37:20: 13:2a:d6:af:66:df:2b:f8:03:bd:9f:7b:55:6e:ff: f6:4e:b5:29:9e:f8:c2:2f:33:90:82:c1:6e:83:ec: fb:75:3a:3f:c9:44:03:43:91:8b:47:f2:3d:72:83: bd:b4:dd:20:aa:65:ad:35:87:cf:ed:0e:1f:6f:be: 24:ef:bc:68:01:cd:2f:52:e4:08:be:04:f8:ae:92: 82:0d:9d:c0:6e:bd:ee:59:95:4b:0f:af:6d:13:ba: a9:7b:57:0a:bb:b4:73:36:4b:bc:32:49:64:1a:8a: ae:d0:40:8b:94:6e:ea:bc:6c:db:0f:8d:cf:43:1a: f1:fa:58:8a:48:d2:8f:64:cd:f6:bf:ca:9f:f5:49: 2f:08:76:d0:22:4a:ba:2f:39:58:75:e7:5b:ef:4d: 19:09:bb:ff:12:2c:76:1f:f0:06:07:44:4a:a6:57: 7e:0a:d4:9f:f9:8c:05:97:7e:89:fb:70:55:b3:f1: a5:39:98:1e:c6:5f:34:74:4e:17:37:5b:d0:9c:84: 38:51:ad:d0:80:5f:e9:76:ef:7c:a2:4c:c4:3b:98: dc:20:0e:e3:06:e3:4b:2a:ce:e9:57:72:cb:63:d8: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:CB:5C:F1:3F:D8:EE:A0:B5:EB:5F:84:72:2E:C7:F6:06:EC:80 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3232342e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.58.224.0/19 Signature Algorithm: sha256WithRSAEncryption 08:ef:58:1a:fb:55:be:db:57:cb:51:c1:33:81:31:fc:d6:76: c6:f3:d6:e5:76:c0:e2:6a:cc:8e:5c:50:c7:0b:4c:f3:21:b6: 1d:fa:fc:76:a4:f5:b0:b8:94:4a:26:43:4a:90:e7:35:0d:ab: 2a:5e:80:63:36:47:33:ad:09:48:ec:5f:fd:5f:82:02:c5:b4: 07:31:20:7b:be:fe:89:99:16:a8:eb:0a:ce:dc:85:0d:ac:95: d5:67:14:c1:0e:d3:f3:1c:ba:9b:0f:c9:e8:e2:b3:d0:40:67: 1a:d1:0e:ce:9b:bf:57:f5:a8:57:af:d1:92:70:a4:7c:d0:2e: c6:82:dc:86:62:de:9f:a2:e9:01:7e:dc:a2:d9:22:94:72:73: d8:1f:2b:d5:5b:2c:1e:8b:d4:56:b9:3a:90:51:aa:20:48:61: eb:2a:ed:25:44:d6:96:72:0e:c0:5a:c8:4e:a8:fe:a1:79:bd: 49:79:62:d3:81:61:8e:1c:94:0d:76:0f:ee:e6:2d:fc:8c:c8: 8a:8e:5c:24:5d:9c:e5:69:73:ad:e1:51:37:7d:e0:de:14:a6: c8:7d:fc:0c:01:78:28:f5:4e:78:2c:41:5d:5f:e5:f7:57:55: 9c:03:f0:c4:ec:45:fe:72:4b:d3:c0:42:fa:e1:f8:f3:83:a5: cb:a4:e1:06 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUd6pQlaCypZYTNiuKeYciCA4sU8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ4MzNaFw0yNzA2MjgwMjUzMzNaMDMxMTAvBgNV BAMTKDE0M0ZDQjVDRjEzRkQ4RUVBMEI1RUI1Rjg0NzIyRUM3RjYwNkVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfmWhqZjq8zM4bmPgiDPVhuvH RiEHiLifF483IBMq1q9m3yv4A72fe1Vu//ZOtSme+MIvM5CCwW6D7Pt1Oj/JRAND kYtH8j1yg7203SCqZa01h8/tDh9vviTvvGgBzS9S5Ai+BPiukoINncBuve5ZlUsP r20Tuql7Vwq7tHM2S7wySWQaiq7QQIuUbuq8bNsPjc9DGvH6WIpI0o9kzfa/yp/1 SS8IdtAiSrovOVh151vvTRkJu/8SLHYf8AYHREqmV34K1J/5jAWXfon7cFWz8aU5 mB7GXzR0Thc3W9CchDhRrdCAX+l273yiTMQ7mNwgDuMG40sqzulXcstj2AadAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFD/LXPE/2O6gtetfhHIux/YG7IAwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzIzNTJlMzUz ODJlMzIzMjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBX064DANBgkqhkiG9w0BAQsFAAOCAQEACO9YGvtVvttXy1HBM4Ex/NZ2 xvPW5XbA4mrMjlxQxwtM8yG2Hfr8dqT1sLiUSiZDSpDnNQ2rKl6AYzZHM60JSOxf /V+CAsW0BzEge77+iZkWqOsKztyFDayV1WcUwQ7T8xy6mw/J6OKz0EBnGtEOzpu/ V/WoV6/RknCkfNAuxoLchmLen6LpAX7cotkilHJz2B8r1VssHovUVrk6kFGqIEhh 6yrtJUTWlnIOwFrITqj+oXm9SXli04FhjhyUDXYP7uYt/IzIio5cJF2c5WlzreFR N33g3hSmyH38DAF4KPVOeCxBXV/l91dVnAPwxOxF/nJL08BC+uH484Oly6ThBg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:24 2026 by rpki-client